Below, you will find the current list of sub-processors. The list of sub-processors is divided into two categories; Core Platform and Optional Platform Extensions.
When we share your information with a sub-processor, we remain responsible for it. Before engaging any sub-processors, we perform due diligence to evaluate their privacy, security and confidentiality practices, and execute an agreement (DPA) with them that implements their obligations.
We will update this page when we bring on a new service provider/sub-processor who handles our users’ personal data, remove a sub-processor, or change how we use a sub-processor. If you have questions or concerns about a new sub-processor, we’d be happy to help. Also, if you’d like to be notified when we add a new sub-processor, please contact us and we’ll add you to the email list. Please contact us at privacy@velory.com
The Core Platform is GDPR-compliant and have sub-processors that process personal data within the EU (and countries that are deemed to offer an adequate level of data protection according to the European Commission).
The Sub-processors listed below and their functionalities form a vital and fundamental part of Velory's platform.
Location of processing
Poland, Germany, other (EU)
Personal Data
Service description
Customer data and user tracking, user statistics, analytics, storage of report data. Cloud Data Warehouse. (Does not include Google Analytics.
Location of processing
Worldwide
Personal Data
Service description
Cloudflare provides content distribution, security, abuse prevention and DNS services for web traffic transmitted to and from the services.
Cloudflare routes traffic to worldwide data centers closest to the user's location.
Location of processing
Germany
Personal Data
Service description
Processes user activity data requests for analytics, and mostly for development purposes.
Location of processing
Stockholm, Sweden
Personal Data
Service description
Database and deployment host, storing and processing user data.
Location of processing
Netherlands
Personal Data
Service description
Processing user data for analytics and visualizing insights
Location of processing
Ireland
Personal Data
Service description
Logging of customer experience and in-app surveys
Location of processing
EU
Personal Data
Service description
Transmission of email relating to accounts and orders
Location of processing
Germany
Personal Data
Service description
CRM tool for Customer Success related work. Storing customer interactions, CS related work (onboarding/activation) and chats from Zendesk.
Location of processing
Data stored in Frankfurt, Germany. Support based in Israel*
Personal Data
Service description
Shared analytics data. Documents and references to data sources are shared.
*The third country meets the GDPR-requirements and is therefore considered, by the European Commission, as a country that offers an adequate level of data protection.
Location of processing
Germany*
Personal Data
Service description
Using and storing contact and chat information for customer support related to our platform
*Chat messages from support are stored in US
Location of processing
Ireland
Personal Data
Service description
Tracks user behavior and sessions on the website, for example provides heatmaps of user engagement.
The below listed platform extensions have an opt-out option
Location of Processing:
Europe
Personal data:
Service description
Mobile Device Management (MDM) services provided by a third-party provider for customers who purchase this service. Velory facilitates an integration with the third-party MDM provider to enable seamless management for the customer. However, the MDM service itself is not an integral part of Velory's core platform offerings.
Location of Processing:
Optional (EU available)
Personal data:
Service description
Mobile Device Management (MDM) services provided by a third-party provider for customers who purchase this service. Velory facilitates an integration with the third-party MDM provider to enable seamless management for the customer. However, the MDM service itself is not an integral part of Velory's core platform offerings.
Location of Processing:
United States
Personal data:
Service description
Mobile Device Management (MDM) services provided by a third-party provider for customers who purchase this service. Velory facilitates an integration with the third-party MDM provider to enable seamless management for the customer. However, the MDM service itself is not an integral part of Velory's core platform offerings.
Location of Processing:
Worldwide
Personal data:
Service description
Stripe provides secure payment processing services for various transactions on our platform. Stripe’s services include collecting, storing, and processing payment data to enable transactions and prevent fraudulent activity.
Location of processing
United States
Personal Data
Service description
Segment is an ETL/ELT (Extract-Transform-Load) tool that saves customer activity data from within the platform and allows analysis for product improvement purposes
Location of processing
United States
Personal Data
Service description
Supports key features of our digital products and has access to user data for that purpose.
Location of processing
United States
Personal Data
Service description
Data flow automation tool for creating custom events based on orders. This includes all information associated with the order including the user who placed it and that person’s data.